CVE-2023-40484

CVE-2023-40484 affects Maxon Cinema 4D through a stack-based buffer overflow in the SKP file parser. The flaw stems from insufficient validation of the length of user-supplied data before copying it into a fixed-length stack buffer, enabling remote code execution. Exploitation requires user inter...

CVE-2023-40482

CVE-2023-40482 affects Maxon Cinema 4D through an out-of-bounds write in SKP file parsing, enabling remote code execution. The flaw arises from insufficient validation of SKP data, allowing a write beyond allocated memory. Exploitation requires user interaction (visiting a malicious page or openi...

CVE-2023-40480

The NETGEAR RAX30 DHCP server has a command-injection vulnerability that allows network-adjacent attackers to execute code with root privileges without authentication. The issue stems from insufficient validation of a user-supplied string used to invoke a system call within the DHCP server. Sever...

CVE-2023-40481

7-Zip (SQFS parsing) is affected by CVE-2023-40481: an out-of-bounds write in theSquashFS file parsing path can lead to remote code execution when a user opens a malicious file or visits a malicious page. The issue stems from insufficient validation of user-supplied data, allowing a write past th...

CVE-2023-40479

The CVE-2023-40479 entry concerns NETGEAR RAX30 UPnP, where the UPnP service allows an attacker to inject a string that is passed to a system call, enabling remote code execution as root. Affected product: NETGEAR RAX30 router; vulnerability arises from insufficient validation of user-supplied in...

CVE-2023-40475

CVE-2023-40475 affects the MXF file parsing in GStreamer plugins-bad. The flaw is an integer overflow when handling MXF data, enabling remote code execution within the process if a crafted MXF file is processed. Exploitation is interaction-dependent and depends on the specific plugin/implementati...

CVE-2023-40474

CVE-2023-40474 is a GStreamer MXF parsing vulnerability caused by an integer overflow when processing MXF files, leading to remote code execution in vulnerable GStreamer deployments. The issue stems from insufficient validation of user-supplied data, which allows the overflow to occur during buff...

CVE-2023-40472

CVE-2023-40472 affects PDF-XChange Editor. The vulnerability is an untrusted pointer dereference caused by improper validation of a user-supplied string before it is dereferenced, enabling Remote Code Execution in the context of the current process. Exploitation requires user interaction (target ...

CVE-2023-40473

PDF-XChange Editor Doc Object Out-Of-Bounds Read Information Disclosure Vulnerability affects PDF-XChange Editor. The flaw resides in how Doc objects are handled; performing JavaScript actions can trigger a read past the end of an allocated object, enabling information disclosure. Exploitation re...

CVE-2023-40470

Summary: CVE-2023-40470 affects PDF-XChange Editor via JP2 file parsing. The vulnerability stems from improper validation of user-supplied data, allowing an out-of-bounds read (read past the end of an allocated object) and potential information disclosure. This can be leveraged to execute arbitra...

CVE-2023-39506

PDF-XChange Editor contains a Directory Traversal vulnerability in the createDataObject path validation, enabling arbitrary code execution via user-controlled paths. The flaw allows code execution in the current user context after the user visits a malicious page or opens a crafted file, requirin...

CVE-2023-39502

CVE-2023-39502 affects PDF-XChange Editor via an OXPS file parsing out-of-bounds write that allows remote code execution . The flaw stems from insufficient validation of user-supplied data, causing a write past the end of an allocated buffer. Exploitation requires user interaction (visiting a mal...

CVE-2023-39496

PDF-XChange Editor is affected by a TIF file parsing out-of-bounds read that enables remote code execution. The flaw occurs during parsing of TIF data; crafted files can trigger a read past the end of an allocated buffer, allowing an attacker to execute code in the process context. Exploitation r...

CVE-2023-39493

CVE-2023-39493 affects PDF-XChange Editor. The vulnerability is in the exportAsText method, where a JavaScript interface exposes the ability to write arbitrary files, enabling remote code execution in the context of the current user. Exploitation requires user interaction (target user must visit ...

CVE-2023-39487

PDF-XChange Editor contains a vulnerability in the handling of util objects that can trigger a read past the end of an allocated object via JavaScript actions. This out-of-bounds read leads to information disclosure and, when combined with other issues, may enable arbitrary code execution in the ...

CVE-2023-39486

PDF-XChange Editor JP2 File Parsing Memory Corruption Remote Code Execution Vulnerability. Affected software: PDF-XChange Editor (Windows). Root cause: improper validation in JP2 file parsing leading to memory corruption. Impact: remote code execution in the compromised process; requires user int...

CVE-2023-39484

CVE-2023-39484 affects PDF-XChange Editor. The vulnerability lies in PDF file parsing where memory is accessed without proper initialization, leading to information disclosure. Impact: potential exposure of sensitive data on affected installations. Exploitation requires user interaction (the targ...

CVE-2023-39482

The CVE-2023-39482 entry concerns Softing Secure Integration Server. The issue is located in the libopcuaclient.so component and stems from hardcoded cryptographic keys, enabling a remote attacker to disclose stored credentials and potentially facilitate further compromise. According to the provi...

CVE-2023-39480

CVE-2023-39480 affects Softing Secure Integration Server, specifically the FileDirectory OPC UA Objects handling. The flaw allows remote attackers to create arbitrary files on affected installations by exploiting unauthorized access to the filesystem, with authentication required but bypassable. ...

CVE-2023-39479

Softing Secure Integration Server OPC UA Gateway Directory Creation Vulnerability (CVE-2023-39479) affects the OPC UA Gateway handling of FileDirectory OPC UA Objects. The flaw allows remote attackers, bypassing authentication, to create directories by accessing the filesystem, potentially enabli...